Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in recent security patch releases. Vulnerability Details CVEID:CVE-2026-13757 DESCRIPTION: A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and...

Security Bulletin: IBM App Connect Enterprise is affected by multiple vulnerabilities in Eclipse Jetty (CVE-2026-8384 and CVE-2026-19203)

Summary IBM App Connect Enterprise Toolkit is affected by multiple vulnerabilities in Eclipse Jetty. Vulnerability Details CVEID:CVE-2026-8384 DESCRIPTION: In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instea...

WSO2-2021-1260

WSO2-2021-1260: Deletion of Arbitrary files via Path Traversal in Artifact Name in WSO2 ESB Due to the unsanitized user input in the Artifact Upload feature, an arbitrary file deletion attack could be carried out by leveraging path traversal in the "artifactName" parameter. Vendor Disclosure: The...

CVE-2026-20660

CVE-2026-20660 PoC Bundle This folder packages a standalone proof-of-concept for: CVE-2026-20660 CFNetwork NSGZipDecoder path traversal via gzip FNAME Impact on vulnerable macOS Safari with auto-open enabled 1. Directory Layout server.py: Main PoC server with configurable traversal depth and...

VulnScan

VulnScan Scanner di vulnerabilita' web. Fa il crawling di un sito, trova form e parametri, e li prova contro SQL injection, XSS riflesso, path traversal e header di sicurezza mancanti. Produce un report a terminale, un PDF e ha una dashboard Flask. Progetto di apprendimento. L'ho scritto per capi...

health-check

health-check Health Check & Troubleshooting daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin bin:x:2:2:bin:/bin:/usr/sbin/nologin sys:x:3:3:sys:/dev:/usr/sbin/nologin sync:x:4:65534:sync:/bin:/bin/sync games:x:5:60:games:/usr/games:/usr/sbin/nologin ...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 Scanner A safe, non-destructive Python scanner for Cisco ASA / FTD WebVPN Authentication Bypass CVE-2025-20362. CVE-2025-20362 allows unauthenticated attackers to bypass authentication and access restricted WebVPN resources through path traversal / normalization flaws. Overview Thi...

CVE-2021-43798

CVE-2021-43798: Grafana Arbitrary File Read Vulnerability Added nuclei template for full-version detection on Windows+Linux List of 52 plugins: live icon loki text logs news stat mssql mixed mysql tempo graph gauge table debug zipkin jaeger geomap canvas grafana welcome xychart heatmap postgres...

CVE-2023-28252-

CVE-2023-28252- CVE-2023-28252 exploit detection Monitoring of file creation in the directory where the exploit leaves files used for exploitation, at a hardcoded path in the folder "C:\Users\Public", "C:\Users\Public.container", "C:\Users\Public\MyLog.blf" and "C:\Users\Public\p"...

cve-2024-56348

JetBrains TeamCity Authentication Bypass + RCE CVE-2024-56348 PoC 📜 Description CVE-2024-56348 is a critical authentication bypass vulnerability in JetBrains TeamCity on-premises affecting all versions prior to 2024.12. The REST API improperly handles requests to paths containing ;.jsp, allowing ...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

pathprober

pathprober Descubre y sondea rutas HTTP usando metodología de fuerza bruta y filtrado por una palabra específica o dos palabras a la vez. Propósito Forzar directorios web o rutas HTTP y validar usando el código de respuesta HTTP ya no es relevante. Esta herramienta te ayudará a realizar una prueb...

SpringPathTraversal

This repository does not have a README...

cve-2026-75604

CVE-2026-75604 - Next.js path traversal → RCE Windows · research lab Reproduction lab and exploit tooling for CVE-2026-75604 , an unauthenticated path-traversal in the Next.js incremental cache that affects Windows hosts. A single un-escaped backslash lets an attacker read and write files outside...

nginxpwner

Nginxpwner Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Install using Docker git clone https://github.com/stark0de/nginxpwner cd nginxpwn...

NotCVE-2026-0014

Summary Product: InputLeap v3.0.3 Vendor: input-leap Vulnerability: Path Traversal CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' Description InputLeap's drag-and-drop handler tries to sanitize filenames by finding the last path separator and keeping only...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

CVE-2026-21015-PHP-Filter-Chain-Arbitrary-File-Read

CVE-2026-21015 – PHP Filter Chain Arbitrary File Read Program Code PHP // vulnerable.php - Includes file based on user input via filter ?php $file = $GET'page'; // Attempt to sanitize by allowing only .php files, but vulnerable to filter wrapper include"php://filter/convert.base64-encode/resource...

nuclei-CVE-2025-24813

nuclei-CVE-2025-24813 This repository contains a yaml-template, to scan whether a Service may be vulnerable to CVE-2025-24813, without disrupting the server/causing any form of damage, using the vulnerability scanner nuclei. CVE-2025-24813 CVE-2025-24813 is a vulnerability in the Apache Tomcat...